Appl.No. 10/612,996 

Reply to Office action of March 21, 2007 

Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A method of scanning a requested file for a computer 
malware comprising the steps of: 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file , wherein the randomly 
accessed portion of the file is requested utilizing a byte range technique : and 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fiilfill the request for data comprising a 
portion of the requested file. 

2. (Original) The method of claim 1, wherein the request to transfer the file from the 
computer malware scanning software comprises a request to transfer the file from an 
external system. 

3. (Original) The method of claim 2, wherein the external system is 
communicatively connected via a network. 

4. (Original) The method of claim 3, wherein the network comprises the Internet. 

5. (Original) The method of claim 4, wherein the step of transferring the requested 
portion of the file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 

file. 
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6. (Original) The method of claim 5, wherein the session is a hypertext transfer 
protocol session. 

7. (Currently Amended) The method of claim 6, wherein the hypertext transfer 
protocol session uses [[a]] the byte range technique. 

8. (Currently Amended) The method of claim 7, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring th e entir e an entirety of the requested file and supplying the requested 
data to the computer malware scanning software to fiilfiU the request for data comprising 
a portion of the requested file. 

9. (Original) The method of claim 8, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

10. (Original) The method of claim 9, wherein an indication that the requested portion 
of the requested file cannot be randomly accessed comprises an error indication or a 
transfer of the entire requested file. 

1 1 . (Original) The method of claim 7, fiirther comprising the steps of: 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining that information associated with the file has changed. 

12. (Original) The method of claim 1 1, wherein the information associated with the 
file comprises hypertext transfer protocol entity tags or last modified timestamp 
information. 

13. (Original) The method of claim 12, further comprising the step of: 
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restarting the requests from the computer malware scamiing software for data. 

14. (Currently Amended) The method of claim 13, fiirther comprising the step of: 
transferring th e entir e an entirety of the requested file. 

15. (Original) The method of claim 1, further comprising the step of: 

performing the steps of claim 1 in response to a request from a user system for the 

file. 

16. (Original) The method of claim 15, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the file includes a computer malware; and 

delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

17. (Currently Amended) The method of claim 16, wherein the step of delivering the 
file to the user system comprises the steps of: 

determining whether th e entir e an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and delivering 
those portions of the file once they have been transferred. 

18. (Original) The method of claim 17, wherein the step of transferring those portions 
of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been transferred. 

19. (Original) The method of claim 1 8, wherein the session is a hypertext transfer 
protocol session. 



ACTIVE/l 9337805.1 



Page 4 of 20 



Appl.No. 10/612,996 

Reply to Office action of March 21, 2007 

20. (Currently Amended) The method of claim 19, wherein the hypertext transfer 
protocol session uses [[a]] the byte range technique. 

21 . (Currently Amended) A system of scanning a requested file for a computer 
malware virus comprising: 

a processor operable to execute computer program instructions; 
a memory operable to store computer program instructions executable by the 
processor; and 

computer program instructions stored in the memory and executable to perform 
the steps of: 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file , wherein the randomly 
accessed portion of the file is requested utilizing a bvte range technique : and 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fialfill the request for data comprising a 
portion of the requested file. 

22. (Original) The system of claim 21, wherein the request to transfer the file from 
the computer malware scanning software comprises a request to transfer the file from an 
external system. 

23. (Original) The system of claim 22, wherein the external system is 
communicatively connected via a network. 

24. (Original) The system of claim 23, wherein the network comprises the Internet. 

25. (Original) The system of claim 24, wherein the step of transferring the requested 
portion of the file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 

file. 
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26. (Original) The system of claim 25, wherein the session is a hypertext transfer 
protocol session. 

27. (Currently Amended) The system of claim 26, wherein the hypertext transfer 
protocol session uses [[a]] the byte range technique. 

28. (Currently Amended) The system of claim 27, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring th e e ntir e an entirety of the requested file and supplying the requested 
data to the computer malware scanning software to fulfill the request for data comprising 
a portion of the requested file. 

29. (Original) The system of claim 28, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

30. (Original) The system of claim 29, wherein an indication that the requested 
portion of the requested file cannot be randomly accessed comprises an error indication 
or a transfer of the entire requested file. 

31. (Original) The system of claim 27, further comprising the steps of: 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining that information associated with the file has changed. 

32. (Original) The system of claim 3 1 , wherein the information associated with the 
file comprises hypertext transfer protocol entity tags or last modified timestamp 
information. 
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33. (Original) The system of claim 32, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

34. (Currently Amended) The system of claim 33, fiirther comprising the step of: 
transferring th e entir e an entirety of the requested file. 

35. (Original) The system of claim 21 , further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

file. 

36. (Original) The system of claim 35, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the file includes a computer malware; and 

delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

37. (Currently Amended) The system of claim 36, wherein the step of delivering the 
file to the user system comprises the steps of: 

determining whether the e ntir e an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and deliverinjg 
those portions of the file once they have been transferred. 

38. (Original) The system of claim 37, wherein the step of transferring those portions 
of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been transferred. 

39. (Original) The system of claim 38, wherein the session is a hypertext transfer 
protocol session. 



ACTIVE/19337805. 1 



Page 7 of 20 



Appl.No. 10/612,996 

Reply to Office action of March 21, 2007 

40. (Currently Amended) The system of claim 39, wherein the hypertext transfer 
protocol session uses [[a]] the byte range technique. 

41. (Currently Amended) A computer program product of scanning a requested file 
for a computer malware comprising: 

a computer readable storage medium: 

computer program instructions, recorded on the computer readable storage 
medium, executable by a processor, for performing the steps of 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file , wherein the randomly 
accessed portion of the file is requested utilizing a bvte range technique : and 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fiilfill the request for data comprising a 
portion of the requested file. 

42. (Original) The computer program product of claim 41, wherein the request to 
transfer the file from the computer malware scanning software comprises a request to 
transfer the file from an external system. 

43. (Original) The computer program product of claim 42, wherein the external 
system is communicatively connected via a network. 

44. (Original) The computer program product of claim 43, wherein the network 
comprises the Internet. 

45. (Original) The computer program product of claim 44, wherein the step of 
transferring the requested portion of the file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 

file. 
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46. (Original) The computer program product of claim 45, wherein the session is a 
hypertext transfer protocol session. 

47. (Currently Amended) The computer program product of claim 46, wherein the 
hypertext transfer protocol session uses [[a]] the byte range technique. 

48. (Currently Amended) The computer program product of claim 47, further 
comprising the steps of: 

determining that the requested portion of the requested file cannot be transferred; 

and 

transferring th e entir e an entirety of the requested file and supplying the requested 
data to the computer malware scanning software to fulfill the request for data comprising 
a portion of the requested file. 

49. (Original) The computer program product of claim 48, wherein the requested 
portion of the requested file cannot be transferred because the requested portion of the 
requested file cannot be randomly accessed. 

50. (Original) The computer program product of claim 49, wherein an indication that 
the requested portion of the requested file cannot be randomly accessed comprises an 
error indication or a transfer of the entire requested file. 

5 1 . (Original) The computer program product of claim 47, further comprising the 
steps of: 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining that information associated with the file has changed. 
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52. (Original) The computer program product of claim 5 1 , wherein the information 
associated with the file comprises hypertext transfer protocol entity tags or last modified 
timestamp information. 

53. (Original) The computer program product of claim 52, further comprising the step 
of: 

restarting the requests from the computer malware scanning software for data. 

54. (Currently Amended) The computer program product of claim 53, further 
comprising the step of: 

transferring the e ntir e an entirety of the requested file. 

55. (Original) The computer program product of claim 41 , further comprising the step 
of: 

performing the steps of claim 1 in response to a request from a user system for the 

file. 

56. (Original) The computer program product of claim 55, further comprising the 
steps of: 

scanning at the computer malware scanning software the data comprising a 
portion of the requested file to determine if the file includes a computer malware; and 

delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

57. (Currently Amended) The computer program product of claim 56, wherein the 
step of delivering the file to the user system comprises the steps of: 

determining whether th e e ntire an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and delivering 
those portions of the file once they have been transferred. 
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58. (Original) The computer program product of claim 57, wherein the step of 
transferring those portions of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been transferred. 

59. (Original) The computer program product of claim 58, wherein the session is a 
hypertext transfer protocol session. 

60. (Currently Amended) The computer program product of claim 59, wherein the 
hypertext transfer protocol session uses [[a]] the byte range technique. 

6 1 . (New) The method of claim 1 , wherein the byte range technique turns a serial 
download mechanism into a random access file mechanism. 

62. (New) The method of claim 1, wherein the data associated with the request fi-om 
the computer malware scanning software comprises a plurality of selected randomly 
accessed portions of the requested file. 

63. (New) The method of claim 62, wherein the plurality of selected randomly 
accessed portions of the requested file are read in a random order. 

64. (New) The method of claim 1, wherein a system call handler intercepts system 
level calls made by the computer malware scanning software and simulates system level 
function calls utilized by the computer malware scanning software to determine whether 
the file includes the computer malware. 
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